University Risk Management Jobs in California (NOW HIRING)

Deputy Chief Information Officer & Information Security Officer
Job no: 555439
Work type: Management (MPP)
Location: Monterey Bay
Categories: MPP, Administrative, At-Will, Full Time, Information Systems & Technology, On-site (work in-person at business location)
Classification: Administrator III
Hours: Full-time / 40 hours per week
FLSA: Exempt
Anticipated Hiring Salary Range: $14,592 to $16,250* mo.
CSU Salary Schedule
*CSUMB provides pay scales representing its good faith estimate of what the university reasonably expects to pay for this position. The pay offered to a selected candidate will be determined on factors such as (but not limited to) the scope and responsibilities of the position, the qualifications of the selected candidate, departmental budget availability, internal equity, and CSU systemwide pay for comparable jobs.
Priority Screening Date: March 30, 2026
Recruitment Status: Open Until Filled
Employment with the California State University System
ABOUT CSUMB
California State University, Monterey Bay is a mid-sized university in California's Central Coast that grants undergraduate and graduate degrees. Powered by an inspiring Founding Vision Statement, CSUMB is part of the nation's largest four-year public university system, California State University, which educates nearly 460,000 students every year.
With a vibrant, diverse student body of over 7,000 students, CSU Monterey Bay is both a Minority Serving Institution and a Hispanic Serving Institution. Our staff and faculty transform students' lives with a focus on student success and engagement through experiential learning, service learning, and a strong emphasis on multicultural and global perspectives. CSUMB's sustainability goal is to be carbon neutral by 2030.
The university's Strategic Plan prioritizes inclusive excellence through recruiting and investing in developing a diverse body of faculty, staff and administrators. Many appreciate living and working close to the shores of beautiful Monterey Bay, with easy access to recreational areas from Big Sur to Santa Cruz. Nearby opportunities for collaborative research include working in the Monterey Bay National Marine Sanctuary and Silicon Valley, and with colleagues at local research universities, including UC Santa Cruz and Stanford University.
As one of the 22 campuses in the CSU system, CSUMB offers excellent benefits, including access to below-market-rate rental housing on East Campus, and competitive salaries for faculty and staff. With proximity to the San Francisco Bay Area and San Jose, opportunities for faculty, staff and students are as endless as the shores of the nearby Pacific Ocean.
PURPOSE:
Under the general direction of the Associate Vice President and Chief Information Officer (AVP/CIO), the Deputy Chief Information Officer / Information Security Officer serves as the principal deputy and senior administrative leader for Information Technology. This position supports the AVP/CIO by providing leadership continuity, overseeing major operational and organizational functions, executing divisional strategy, and serving as the University's Information Security Officer with responsibility for security governance, risk management, and compliance.
ESSENTIAL DUTIES AND RESPONSIBILITIES include, but are not limited to, the following:

1. Deputy CIO Leadership, Strategy Execution & Organizational Change

Supports execution of the AVP/CIO's strategic vision by translating divisional priorities into operational plans, organizational structures, and coordinated programs and initiatives. Provides leadership continuity and operational oversight across Information Technology and acts on behalf of the AVP/CIO as delegated. Leads organizational change initiatives related to structure, roles, processes, and service delivery; builds alignment across leadership teams; and ensures effective communication, accountability, and follow-through.

1. Information Security Governance & Risk Management (ISO Function

Serves as the University's Information Security Officer, responsible for institution-wide information security strategy, governance, risk management, and compliance. Establishes and maintains an information security framework aligned with CSU policies, legal and regulatory requirements, a recognized security framework, and institutional priorities. Oversees security risk assessments, incident response coordination, audit support, and security awareness initiatives. Advises executive leadership on cybersecurity risks, mitigation strategies, and security posture in alignment with the University's risk tolerance, ensuring security considerations are integrated into broader IT and institutional decision-making.

1. IT Operations Oversight & Service Integration

Provides senior oversight and coordination of IT operational portfolios, ensuring effective service integration, staffing alignment, and organizational capacity. Oversees workforce planning and position control for Information Technology in coordination with Human Resources. Directly supervises professional administrative staff assigned to Information Technology, including recruitment, training, performance evaluation, and work direction. Advises the AVP/CIO on organizational design and staffing strategies.

1. People Leadership, Talent Development, Change Management & Culture

Interprets and applies CSU and campus administrative policies within Information Technology and supports and coordinates change management efforts across IT leadership to ensure policies, processes, and controls are effectively adopted and sustained. Coordinates responses to audits and compliance reviews; identifies administrative and fiscal risks; and works with leaders and staff to guide changes needed to strengthen institutional accountability, organizational resilience, and operational continuity.

1. Policy Interpretation, Compliance & Institutional Coordination

Represents Information Technology in campus administrative forums as delegated by the AVP/CIO. Serves as a primary administrative liaison between Information Technology, campus partners, and CSU system offices on IT-related administrative and fiscal matters.
Other Functions:
Perform other job-related duties and special projects as assigned.
KNOWLEDGE, SKILLS AND ABILITIES:
Thorough knowledge of: Principles and practices of information technology leadership, administrative management, strategic planning and execution, and organizational change in complex, regulated organizational environments. Information security governance, risk management, and compliance frameworks appropriate to higher education, public sector, or similarly regulated industries. Institutional policies, standards, and procedures related to information technology, data protection, privacy, and compliance. The organizational structure, governance, and operations of a comprehensive higher education institution.
Skilled in: Leading and executing organizational change initiatives, including translating strategic vision into operational plans, structures, and processes. Guiding the responsible adoption of emerging technologies, including artificial intelligence, in ways that balance innovation, ethics, risk, and operational readiness. Leading large-scale enterprise technology initiatives and platform transitions affecting diverse user populations. Information security governance, risk assessment, and executive-level coordination of incident response and compliance activities. Coaching and influencing leaders and managers to strengthen administrative consistency, operational rigor, and follow-through. Communicating complex technical, operational, and risk concepts clearly to technical and non-technical stakeholders. Bringing structure, clarity, and follow-through to complex initiatives, including defining priorities, sequencing work, and supporting leaders in delivering results.
Ability to: Exercise sound judgment and discretion in complex and ambiguous situations. Lead through influence, collaboration, and trust rather than positional authority. Serve as a trusted deputy and delegate who executes the AVP/CIO's strategic direction and supports leadership continuity. Supervise and guide managers and professional staff, including setting expectations, prioritizing work, and holding leaders accountable. Manage competing priorities while maintaining attention to detail and organizational discipline. Translate cybersecurity and technology risk into business, academic, and operational impact to inform campus leadership and governing bodies. Promote and sustain a culture of cybersecurity awareness, shared responsibility, and continuous improvement practices beyond formal compliance requirements. Lead and oversee complex initiatives using structured planning and execution approaches, while holding leaders accountable for timelines, deliverables, and outcomes.
MINIMUM QUALIFICATIONS:
Equivalent to a bachelor's degree from an accredited institution in information technology, business administration, public administration, or a related field, and progressively responsible experience in information technology leadership and administrative management with division-level scope. Experience must include supervision of professional staff, responsibility for complex operational or organizational functions, and leadership in areas such as technology operations, information security governance, organizational change, or risk management. Additional qualifying experience may be substituted for the required education on a year-for-year basis.
PREFERRED QUALIFICATIONS/DESIRABLE EXPERIENCE:
Experience in senior IT leadership roles within higher education, the public sector, or similarly complex and regulated organizations. Experience serving in an information security governance or risk leadership capacity. Demonstrated experience leading organizational and cultural change, advising senior leadership, and executing complex cross-functional initiatives. Experience overseeing or supporting enterprise-wide technology platform transitions affecting faculty, staff, and students. Demonstrated understanding of the governance, compliance, and risk environment of a comprehensive public university. Experience guiding institutional adoption of emerging technologies such as artificial intelligence. Relevant information security professional certification maintained, such as CISSP, CISM, CEH, GIAC, or equivalent. Technical fluency sufficient to engage in executive-level decision-making across enterprise platforms, security frameworks, and large-scale IT environments.
SPECIAL CONDITIONS OF EMPLOYMENT & POSITION DESIGNATIONS:

• All offers of employment are contingent upon the successful completion of a background check (including a criminal records check).
• The person holding this position will have a duty to report to the Campus Title IX Officer information pertaining to discrimination, harassment, sexual misconduct, sexual exploitation, dating violence, domestic violence, stalking, and retaliation and is required to comply with the requirements set forth in CSU Executive Order EO 1095, EO 1096, and EO 1097 as a condition of employment.
• The person holding this position is considered a "mandated reporter" under the California Child Abuse and Neglect Reporting Act and is required to comply with the requirements set forth in CSU Executive Order 1083 as a condition of employment.
• This position has been designated as a sensitive position with:
• responsibility for the care, safety and security of people (including children and minors), animals and CSU property
• authority to commit financial resources of the university through contracts greater than $10,000
• access to, or control over, cash, checks, credit cards, and/or credit card account information
• access to and responsibility for detailed personally identifiable Level 1 confidential information about students, faculty, staff or alumni that is protected, personal or sensitive as defined in the CSU Information Security Data Classification Standards
• control over campus business processes, either through functional roles or system security access
• This position is required to comply with confidentiality requirements outlined in the Department of Education's Family Educational Rights and Privacy and California's Educational Code Chapter 13 regarding sensitive student issues.
• This position is designated as a Campus Security Authority (CSA). The position is required to participate in training at the direction of the Clery Director and must also promptly report allegations of reportable crimes according to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act, its accompanying regulations; the California State Education Code, Chapter 15.5, of the Donahoe Higher Education Act, Section 67380; and the California State University system-wide policy, Code EO 1107.
• Must possess and maintain a valid license to drive in the State of California, pass the Defensive Training Class, and be insurable under the University's liability coverage.
• Due to the nature of the work, this position requires the ability to work flexible hours, including evenings and weekends, on a regular basis.

PHYSICAL ENVIRONMENT:
Office environment with standard equipment and tasks. The position requires working at a computer and desk for extended periods of time. May require travel between campus offices and off-campus locations.
The health and safety of our students, faculty, and staff remain our highest priority. While on campus, students, faculty, staff, and the community will be expected to follow all campus safety mandates.
BENEFITS/PERKS:
This i